kindflow 0.1.0

package/chunk-3AMW7NXZ.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../imap-runner/src/imap-client.ts","../../imap-runner/src/oauth.ts","../../imap-runner/src/crypto.ts","../../imap-runner/src/idle-watcher.ts","../../imap-runner/src/email-parser.ts","../../imap-runner/src/connection-router.ts"],"sourcesContent":["/**\n * Minimal IMAP client over TLS for Gmail.\n *\n * Supports only the commands needed for IDLE-based email watching:\n * AUTHENTICATE XOAUTH2, SELECT, IDLE/DONE, FETCH, LOGOUT.\n *\n * Zero external dependencies — uses Node.js `tls` and `events` builtins.\n */\n\nimport { connect as tlsConnect, type TLSSocket } from 'tls';\nimport { EventEmitter } from 'events';\n\n/** Gmail IMAP server address. */\nconst GMAIL_HOST = 'imap.gmail.com';\n\n/** Gmail IMAP TLS port. */\nconst GMAIL_PORT = 993;\n\n/** Timeout (ms) waiting for a tagged response to a command. */\nconst COMMAND_TIMEOUT = 30_000;\n\n/**\n * Events emitted by ImapClient.\n *\n * - `exists` — new message count after an untagged EXISTS during IDLE\n * - `error` — connection or protocol error\n * - `close` — socket closed\n */\nexport interface ImapClientEvents {\n  exists: [count: number];\n  error: [error: Error];\n  close: [];\n}\n\n/**\n * A raw FETCH response item for one message.\n */\nexport interface FetchItem {\n  /** IMAP sequence number. */\n  seq: number;\n\n  /** IMAP UID (present if requested). */\n  uid?: number;\n\n  /** Raw data keyed by FETCH field name (e.g. \"BODY[TEXT]\", \"BODY[HEADER.FIELDS (...)]\"). */\n  fields: Map<string, string>;\n}\n\n/**\n * Minimal IMAP client that speaks just enough protocol\n * to authenticate with XOAUTH2, SELECT a mailbox, IDLE,\n * FETCH new messages, and LOGOUT.\n */\nexport class ImapClient extends EventEmitter<ImapClientEvents> {\n  private socket: TLSSocket | null = null;\n  private tagCounter = 0;\n  private buffer = '';\n  private idling = false;\n\n  /**\n   * Pending tagged command: resolve/reject when we see the tagged OK/NO/BAD.\n   * Collects untagged lines in `lines` for the caller to parse.\n   */\n  private pending: {\n    tag: string;\n    resolve: (lines: string[]) => void;\n    reject: (err: Error) => void;\n    lines: string[];\n    timer: ReturnType<typeof setTimeout>;\n  } | null = null;\n\n  /**\n   * Connect to Gmail IMAP over TLS.\n   * Waits for the server greeting before resolving.\n   */\n  async connect(): Promise<void> {\n    return new Promise((resolve, reject) => {\n      this.socket = tlsConnect({ host: GMAIL_HOST, port: GMAIL_PORT }, () => {\n        /* TLS handshake complete — wait for the IMAP greeting line. */\n      });\n\n      this.socket.setEncoding('utf8');\n\n      let greeted = false;\n\n      this.socket.on('data', (chunk: string) => {\n        this.buffer += chunk;\n        this.processBuffer(greeted, () => {\n          greeted = true;\n          resolve();\n        });\n      });\n\n      this.socket.on('error', (err) => {\n        if (!greeted) {\n          reject(err);\n          return;\n        }\n        this.emit('error', err);\n      });\n\n      this.socket.on('close', () => this.emit('close'));\n    });\n  }\n\n  /**\n   * Authenticate with XOAUTH2 SASL mechanism.\n   *\n   * @param token - base64-encoded XOAUTH2 token from {@link buildXOAuth2Token}\n   */\n  async authenticate(token: string): Promise<void> {\n    const lines = await this.sendCommand(`AUTHENTICATE XOAUTH2 ${token}`);\n    const tagged = lines[lines.length - 1] ?? '';\n    if (!tagged.includes('OK')) {\n      throw new Error(`XOAUTH2 authentication failed: ${tagged}`);\n    }\n  }\n\n  /**\n   * SELECT a mailbox and return the current EXISTS count.\n   *\n   * @param mailbox - mailbox name (default \"INBOX\")\n   * @returns number of messages in the mailbox\n   */\n  async select(mailbox = 'INBOX'): Promise<number> {\n    const lines = await this.sendCommand(`SELECT \"${mailbox}\"`);\n    let exists = 0;\n    for (const line of lines) {\n      const match = /^\\* (\\d+) EXISTS/.exec(line);\n      if (match) exists = parseInt(match[1]!, 10);\n    }\n    return exists;\n  }\n\n  /**\n   * Enter IDLE mode. Resolves immediately once the server\n   * acknowledges with \"+\". New mail triggers an `exists` event.\n   * Call {@link done} to exit IDLE.\n   */\n  async idle(): Promise<void> {\n    this.idling = true;\n    const tag = this.nextTag();\n    this.write(`${tag} IDLE\\r\\n`);\n\n    /* Wait for the continuation \"+\" line. */\n    await new Promise<void>((resolve, reject) => {\n      const timeout = setTimeout(() => {\n        this.socket?.removeListener('data', check);\n        reject(new Error('IDLE continuation timeout'));\n      }, COMMAND_TIMEOUT);\n\n      const check = (): void => {\n        const idx = this.buffer.indexOf('\\r\\n');\n        if (idx === -1) return;\n        const line = this.buffer.slice(0, idx);\n        this.buffer = this.buffer.slice(idx + 2);\n\n        if (line.startsWith('+')) {\n          clearTimeout(timeout);\n          this.socket?.removeListener('data', check);\n          this.pending = {\n            tag,\n            resolve: () => {},\n            reject: () => {},\n            lines: [],\n            timer: setTimeout(() => {}, 0),\n          };\n          clearTimeout(this.pending.timer);\n          resolve();\n        } else {\n          this.handleUntagged(line);\n          check();\n        }\n      };\n\n      this.socket?.on('data', check);\n\n      /* Process anything already buffered. */\n      check();\n    });\n  }\n\n  /**\n   * Send DONE to exit IDLE mode.\n   * Waits for the tagged OK response to the IDLE command.\n   */\n  async done(): Promise<void> {\n    if (!this.idling || !this.pending) return;\n    this.idling = false;\n\n    const tag = this.pending.tag;\n\n    const result = new Promise<void>((resolve, reject) => {\n      const timeout = setTimeout(() => reject(new Error('IDLE DONE timeout')), COMMAND_TIMEOUT);\n\n      this.pending = {\n        tag,\n        resolve: () => {\n          clearTimeout(timeout);\n          resolve();\n        },\n        reject: (err) => {\n          clearTimeout(timeout);\n          reject(err);\n        },\n        lines: [],\n        timer: timeout,\n      };\n    });\n\n    this.write('DONE\\r\\n');\n    await result;\n  }\n\n  /**\n   * FETCH messages by sequence range.\n   * Returns raw FETCH response items for the caller to parse.\n   *\n   * @param range - IMAP sequence set (e.g. \"43:*\")\n   * @param fields - FETCH data items (e.g. \"UID BODY[TEXT] BODY[HEADER.FIELDS (FROM TO SUBJECT DATE MESSAGE-ID)]\")\n   * @returns array of parsed FetchItem objects\n   */\n  async fetch(range: string, fields: string): Promise<FetchItem[]> {\n    const lines = await this.sendCommand(`FETCH ${range} (${fields})`);\n    return parseFetchResponse(lines);\n  }\n\n  /**\n   * LOGOUT and close the connection.\n   */\n  async logout(): Promise<void> {\n    try {\n      await this.sendCommand('LOGOUT');\n    } catch {\n      /* Best-effort — socket may already be dead. */\n    }\n    this.socket?.destroy();\n    this.socket = null;\n  }\n\n  /**\n   * Whether the socket is connected and writable.\n   */\n  get connected(): boolean {\n    return this.socket !== null && !this.socket.destroyed;\n  }\n\n  /**\n   * Generate the next IMAP tag (A001, A002, ...).\n   */\n  private nextTag(): string {\n    this.tagCounter++;\n    return `A${String(this.tagCounter).padStart(3, '0')}`;\n  }\n\n  /**\n   * Send a tagged command and collect the response lines until\n   * we see the tagged OK/NO/BAD line.\n   */\n  private sendCommand(command: string): Promise<string[]> {\n    const tag = this.nextTag();\n\n    return new Promise((resolve, reject) => {\n      const timer = setTimeout(() => {\n        this.pending = null;\n        reject(new Error(`Command timeout: ${tag} ${command}`));\n      }, COMMAND_TIMEOUT);\n\n      this.pending = {\n        tag,\n        resolve: (lines) => {\n          clearTimeout(timer);\n          resolve(lines);\n        },\n        reject: (err) => {\n          clearTimeout(timer);\n          reject(err);\n        },\n        lines: [],\n        timer,\n      };\n\n      try {\n        this.write(`${tag} ${command}\\r\\n`);\n      } catch (err) {\n        clearTimeout(timer);\n        this.pending = null;\n        reject(err instanceof Error ? err : new Error(String(err)));\n      }\n    });\n  }\n\n  /**\n   * Write raw bytes to the socket.\n   */\n  private write(data: string): void {\n    if (!this.socket || this.socket.destroyed) {\n      throw new Error('Socket not connected');\n    }\n    this.socket.write(data);\n  }\n\n  /**\n   * Process the receive buffer line by line.\n   * Handles server greeting, untagged responses, and tagged responses.\n   *\n   * @param greeted - whether the server greeting has been received\n   * @param onGreeting - callback for the first greeting line\n   */\n  private processBuffer(greeted: boolean, onGreeting: () => void): void {\n    while (true) {\n      const idx = this.buffer.indexOf('\\r\\n');\n      if (idx === -1) break;\n\n      const line = this.buffer.slice(0, idx);\n      this.buffer = this.buffer.slice(idx + 2);\n\n      if (!greeted && line.startsWith('* OK')) {\n        onGreeting();\n        continue;\n      }\n\n      if (line.startsWith('* ')) {\n        this.handleUntagged(line);\n        this.pending?.lines.push(line);\n        continue;\n      }\n\n      if (line.startsWith('+')) {\n        /* Continuation — mostly handled in IDLE setup. */\n        continue;\n      }\n\n      /* Tagged response — check if it matches the pending command. */\n      if (this.pending && line.startsWith(this.pending.tag)) {\n        const p = this.pending;\n        p.lines.push(line);\n        this.pending = null;\n\n        if (line.includes('OK')) {\n          p.resolve(p.lines);\n        } else {\n          p.reject(new Error(`IMAP error: ${line}`));\n        }\n      }\n    }\n  }\n\n  /**\n   * Handle untagged \"* ...\" responses.\n   * Emits `exists` events during IDLE.\n   */\n  private handleUntagged(line: string): void {\n    const existsMatch = /^\\* (\\d+) EXISTS/.exec(line);\n    if (existsMatch && this.idling) {\n      this.emit('exists', parseInt(existsMatch[1]!, 10));\n    }\n  }\n}\n\n/**\n * Parse raw FETCH response lines into structured FetchItem objects.\n *\n * Handles multi-line literal strings (e.g. body content) that follow\n * \"{size}\\r\\n\" syntax in IMAP FETCH output.\n *\n * @param lines - raw response lines from a FETCH command\n * @returns parsed FetchItem array\n */\nexport const parseFetchResponse = (lines: string[]): FetchItem[] => {\n  const items: FetchItem[] = [];\n  let current: FetchItem | null = null;\n\n  for (const line of lines) {\n    const fetchMatch = /^\\* (\\d+) FETCH \\((.*)/.exec(line);\n    if (fetchMatch) {\n      current = { seq: parseInt(fetchMatch[1]!, 10), fields: new Map() };\n      items.push(current);\n      parseInlineFetchFields(fetchMatch[2]!, current);\n      continue;\n    }\n\n    /* Append continuation data to the last field of the current item. */\n    if (current && current.fields.size > 0) {\n      const lastKey = [...current.fields.keys()].pop()!;\n      const prev = current.fields.get(lastKey) ?? '';\n      current.fields.set(lastKey, prev ? `${prev}\\n${line}` : line);\n    }\n  }\n\n  return items;\n};\n\n/**\n * Parse inline FETCH fields from the parenthesized portion of a FETCH response.\n * Handles UID, BODY[...] with literal or quoted values.\n *\n * @param data - the portion after \"* N FETCH (\"\n * @param item - the FetchItem to populate\n */\nconst parseInlineFetchFields = (data: string, item: FetchItem): void => {\n  /* UID */\n  const uidMatch = /UID (\\d+)/.exec(data);\n  if (uidMatch) item.uid = parseInt(uidMatch[1]!, 10);\n\n  /* BODY[...] fields — extract key and value. */\n  const bodyRegex = /BODY\\[([^\\]]*)\\]\\s*\\{?\\d*\\}?\\s*/g;\n  let match: RegExpExecArray | null;\n  while ((match = bodyRegex.exec(data)) !== null) {\n    const key = `BODY[${match[1]}]`;\n    const afterMatch = data.slice(match.index + match[0].length);\n    /* Value starts after the key — take everything up to the next BODY[ or end. */\n    const nextField = afterMatch.search(/\\b(?:BODY\\[|UID\\b|\\)$)/);\n    const value = nextField === -1 ? afterMatch : afterMatch.slice(0, nextField);\n    item.fields.set(key, value.trim());\n  }\n};\n","/**\n * Google OAuth2 helpers for Gmail IMAP authentication.\n *\n * Handles:\n * - Refreshing access tokens from a stored refresh token\n * - Building XOAUTH2 SASL tokens for IMAP AUTHENTICATE\n * - Generating Google consent URLs for the initial authorization\n */\n\n/** Google OAuth2 token endpoint. */\nconst TOKEN_URL = 'https://oauth2.googleapis.com/token';\n\n/** Google OAuth2 authorization endpoint. */\nconst AUTH_URL = 'https://accounts.google.com/o/oauth2/v2/auth';\n\n/** Scopes needed: full Gmail IMAP/SMTP access + email for identification. */\nconst SCOPES = ['https://mail.google.com/', 'email'];\n\n/**\n * Token response from Google's OAuth2 token endpoint.\n */\nexport interface TokenResponse {\n  /** Short-lived access token for IMAP auth. */\n  accessToken: string;\n\n  /** When the access token expires (seconds from now). */\n  expiresIn: number;\n}\n\n/**\n * Full token response including refresh token, returned only on initial code exchange.\n */\nexport interface CodeExchangeResponse extends TokenResponse {\n  /** Long-lived refresh token (only returned on initial exchange). */\n  refreshToken: string;\n}\n\n/**\n * Refresh an access token using a stored refresh token.\n *\n * @param refreshToken - the long-lived OAuth2 refresh token\n * @param clientId - Google Cloud OAuth2 client ID\n * @param clientSecret - Google Cloud OAuth2 client secret\n * @returns a fresh access token and its TTL\n */\nexport const refreshAccessToken = async (\n  refreshToken: string,\n  clientId: string,\n  clientSecret: string,\n): Promise<TokenResponse> => {\n  const body = new URLSearchParams({\n    grant_type: 'refresh_token',\n    refresh_token: refreshToken,\n    client_id: clientId,\n    client_secret: clientSecret,\n  });\n\n  const res = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: body.toString(),\n  });\n\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`OAuth token refresh failed (${res.status}): ${text}`);\n  }\n\n  const data = (await res.json()) as { access_token: string; expires_in: number };\n  return { accessToken: data.access_token, expiresIn: data.expires_in };\n};\n\n/**\n * Exchange an authorization code for tokens (initial OAuth flow).\n *\n * @param code - the authorization code from Google's consent screen redirect\n * @param clientId - Google Cloud OAuth2 client ID\n * @param clientSecret - Google Cloud OAuth2 client secret\n * @param redirectUri - the redirect URI registered in Google Cloud Console\n * @returns access token, refresh token, and TTL\n */\nexport const exchangeCodeForTokens = async (\n  code: string,\n  clientId: string,\n  clientSecret: string,\n  redirectUri: string,\n): Promise<CodeExchangeResponse> => {\n  const body = new URLSearchParams({\n    grant_type: 'authorization_code',\n    code,\n    client_id: clientId,\n    client_secret: clientSecret,\n    redirect_uri: redirectUri,\n  });\n\n  const res = await fetch(TOKEN_URL, {\n    method: 'POST',\n    headers: { 'Content-Type': 'application/x-www-form-urlencoded' },\n    body: body.toString(),\n  });\n\n  if (!res.ok) {\n    const text = await res.text();\n    throw new Error(`OAuth code exchange failed (${res.status}): ${text}`);\n  }\n\n  const data = (await res.json()) as {\n    access_token: string;\n    refresh_token: string;\n    expires_in: number;\n  };\n\n  return {\n    accessToken: data.access_token,\n    refreshToken: data.refresh_token,\n    expiresIn: data.expires_in,\n  };\n};\n\n/**\n * Build the Google OAuth2 consent URL that the user visits in a browser.\n *\n * @param clientId - Google Cloud OAuth2 client ID\n * @param redirectUri - where Google sends the authorization code\n * @param state - opaque state string for CSRF protection\n * @returns full authorization URL\n */\nexport const buildConsentUrl = (clientId: string, redirectUri: string, state?: string): string => {\n  const params = new URLSearchParams({\n    client_id: clientId,\n    redirect_uri: redirectUri,\n    response_type: 'code',\n    scope: SCOPES.join(' '),\n    access_type: 'offline',\n    prompt: 'consent',\n  });\n\n  if (state) params.set('state', state);\n\n  return `${AUTH_URL}?${params.toString()}`;\n};\n\n/**\n * Build the XOAUTH2 SASL token for IMAP AUTHENTICATE.\n *\n * Format: base64(\"user=\" + email + \"\\x01\" + \"auth=Bearer \" + accessToken + \"\\x01\\x01\")\n *\n * @param email - the Gmail address\n * @param accessToken - a valid OAuth2 access token\n * @returns base64-encoded XOAUTH2 token\n */\nexport const buildXOAuth2Token = (email: string, accessToken: string): string => {\n  const raw = `user=${email}\\x01auth=Bearer ${accessToken}\\x01\\x01`;\n  return Buffer.from(raw).toString('base64');\n};\n","/**\n * AES-256-CBC encryption for storing OAuth refresh tokens at rest.\n * The encryption key is auto-generated and stored at ~/.kindflow/.email-key.\n */\n\nimport { randomBytes, createCipheriv, createDecipheriv } from 'crypto';\nimport { readFileSync, writeFileSync, mkdirSync } from 'fs';\nimport { join } from 'path';\nimport { homedir } from 'os';\n\n/** IV length for AES-256-CBC. */\nconst IV_LENGTH = 16;\n\n/** Encryption algorithm. */\nconst ALGORITHM = 'aes-256-cbc';\n\n/**\n * Resolve the path to the encryption key file.\n *\n * @returns absolute path to ~/.kindflow/.email-key\n */\nconst keyPath = (): string =>\n  join(process.env['KINDFLOW_DATA_DIR'] ?? join(homedir(), '.kindflow'), '.email-key');\n\n/**\n * Load or create the 32-byte hex encryption key.\n * Creates the parent directory and key file if they don't exist.\n *\n * @returns hex-encoded 32-byte key\n */\nexport const getOrCreateKey = (): string => {\n  const path = keyPath();\n\n  try {\n    return readFileSync(path, 'utf-8').trim();\n  } catch {\n    const key = randomBytes(32).toString('hex');\n    mkdirSync(join(path, '..'), { recursive: true });\n    writeFileSync(path, key, { mode: 0o600 });\n    return key;\n  }\n};\n\n/**\n * Encrypt a plaintext string with AES-256-CBC.\n * Returns \"iv:ciphertext\" in hex encoding.\n *\n * @param text - the plaintext to encrypt\n * @param key - hex-encoded 32-byte key\n * @returns encrypted string in \"iv:ciphertext\" format\n */\nexport const encrypt = (text: string, key: string): string => {\n  const iv = randomBytes(IV_LENGTH);\n  const cipher = createCipheriv(ALGORITHM, Buffer.from(key, 'hex'), iv);\n  let encrypted = cipher.update(text, 'utf8', 'hex');\n  encrypted += cipher.final('hex');\n  return `${iv.toString('hex')}:${encrypted}`;\n};\n\n/**\n * Decrypt an \"iv:ciphertext\" string produced by {@link encrypt}.\n *\n * @param text - the encrypted string in \"iv:ciphertext\" format\n * @param key - hex-encoded 32-byte key\n * @returns decrypted plaintext\n */\nexport const decrypt = (text: string, key: string): string => {\n  if (!text) return '';\n  if (!text.includes(':')) {\n    console.warn('[crypto] decrypt called on value without iv:ciphertext format — returning raw value. This may indicate unencrypted data or a corrupted ciphertext.');\n    return text;\n  }\n  const [ivHex, encrypted] = text.split(':') as [string, string];\n  const decipher = createDecipheriv(ALGORITHM, Buffer.from(key, 'hex'), Buffer.from(ivHex, 'hex'));\n  let decrypted = decipher.update(encrypted, 'hex', 'utf8');\n  decrypted += decipher.final('utf8');\n  return decrypted;\n};\n","/**\n * Per-account IMAP IDLE watcher.\n *\n * Connects to Gmail, authenticates with OAuth2, SELECTs INBOX,\n * enters IDLE mode, and emits parsed emails when new messages arrive.\n * Auto-reconnects with exponential backoff on disconnect.\n */\n\nimport { EventEmitter } from 'events';\nimport type { GmailAccountConfig, OAuthCredentials, ParsedEmail } from '@repo/types';\nimport { ImapClient } from './imap-client.js';\nimport { refreshAccessToken, buildXOAuth2Token } from './oauth.js';\nimport { parseEmail } from './email-parser.js';\nimport { decrypt } from './crypto.js';\n\n/** FETCH fields for new messages: UID, headers, and text body. */\nconst FETCH_FIELDS =\n  'UID BODY[HEADER.FIELDS (FROM TO SUBJECT DATE MESSAGE-ID)] BODY[TEXT]';\n\n/** Base delay (ms) for reconnect backoff. */\nconst BASE_RECONNECT_DELAY = 5_000;\n\n/** Maximum reconnect delay (ms). */\nconst MAX_RECONNECT_DELAY = 300_000;\n\n/**\n * Events emitted by IdleWatcher.\n */\nexport interface IdleWatcherEvents {\n  /** A new email has been received and parsed. */\n  email: [email: ParsedEmail];\n\n  /** A non-fatal error occurred. */\n  error: [error: Error];\n\n  /** The watcher disconnected (will auto-reconnect). */\n  disconnected: [accountId: string];\n}\n\n/**\n * Watches a single Gmail account's INBOX via IMAP IDLE.\n *\n * Usage:\n * ```\n * const watcher = new IdleWatcher(account, oauthCreds, encryptionKey);\n * watcher.on('email', (email) => { ... });\n * await watcher.start();\n * ```\n */\nexport class IdleWatcher extends EventEmitter<IdleWatcherEvents> {\n  private client: ImapClient | null = null;\n  private account: GmailAccountConfig;\n  private oauthCredentials: OAuthCredentials;\n  private encryptionKey: string;\n  private running = false;\n  private reconnectAttempts = 0;\n  private reconnectTimer: ReturnType<typeof setTimeout> | null = null;\n  private existsCount = 0;\n  private fetchingInProgress = false;\n  private pendingExistsCount = 0;\n\n  /**\n   * @param account - the Gmail account to watch\n   * @param oauthCredentials - Google OAuth client credentials (client secret is encrypted)\n   * @param encryptionKey - hex key for decrypting refresh token and client secret\n   */\n  constructor(account: GmailAccountConfig, oauthCredentials: OAuthCredentials, encryptionKey: string) {\n    super();\n    this.account = account;\n    this.oauthCredentials = oauthCredentials;\n    this.encryptionKey = encryptionKey;\n  }\n\n  /**\n   * Start watching the account. Connects, authenticates, and enters IDLE loop.\n   */\n  async start(): Promise<void> {\n    this.running = true;\n    await this.connectAndWatch();\n  }\n\n  /**\n   * Stop watching the account. Logs out and closes the connection.\n   */\n  async stop(): Promise<void> {\n    this.running = false;\n    if (this.reconnectTimer !== null) {\n      clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n    if (this.client) {\n      try {\n        await this.client.done();\n      } catch {\n        /* May not be in IDLE. */\n      }\n      await this.client.logout();\n      this.client = null;\n    }\n  }\n\n  /**\n   * Update the account config (e.g. after a token refresh stored a new refresh token).\n   *\n   * @param account - updated account config\n   */\n  updateAccount(account: GmailAccountConfig): void {\n    this.account = account;\n  }\n\n  /**\n   * Update the OAuth credentials (e.g. user changed client ID/secret).\n   *\n   * @param creds - updated OAuth credentials\n   */\n  updateOAuthCredentials(creds: OAuthCredentials): void {\n    this.oauthCredentials = creds;\n  }\n\n  /**\n   * Core loop: connect -> auth -> select -> idle -> fetch on EXISTS -> repeat idle.\n   */\n  private async connectAndWatch(): Promise<void> {\n    try {\n      this.client = new ImapClient();\n      await this.client.connect();\n\n      const accessToken = await this.getAccessToken();\n      const xoauth2Token = buildXOAuth2Token(this.account.email, accessToken);\n      await this.client.authenticate(xoauth2Token);\n\n      this.existsCount = await this.client.select('INBOX');\n      this.reconnectAttempts = 0;\n\n      this.client.on('exists', (count) => this.handleExists(count));\n      this.client.on('close', () => this.handleDisconnect());\n      this.client.on('error', (err) => this.emit('error', err));\n\n      await this.client.idle();\n    } catch (err) {\n      this.emit('error', err instanceof Error ? err : new Error(String(err)));\n      this.scheduleReconnect();\n    }\n  }\n\n  /**\n   * Handle an EXISTS notification during IDLE — new mail has arrived.\n   * Serialized: if a fetch is in progress, records the latest count\n   * and processes the catch-up batch after the current fetch completes.\n   */\n  private async handleExists(newCount: number): Promise<void> {\n    if (newCount <= this.existsCount || !this.client) return;\n\n    if (this.fetchingInProgress) {\n      this.pendingExistsCount = Math.max(this.pendingExistsCount, newCount);\n      return;\n    }\n\n    this.fetchingInProgress = true;\n    this.pendingExistsCount = 0;\n\n    const startSeq = this.existsCount + 1;\n    this.existsCount = newCount;\n\n    try {\n      await this.client.done();\n\n      const items = await this.client.fetch(`${startSeq}:*`, FETCH_FIELDS);\n\n      for (const item of items) {\n        const headerRaw = item.fields.get('BODY[HEADER.FIELDS (FROM TO SUBJECT DATE MESSAGE-ID)]') ?? '';\n        const textRaw = item.fields.get('BODY[TEXT]') ?? '';\n        const uid = item.uid ?? item.seq;\n\n        const parsed = parseEmail(headerRaw, textRaw, uid, this.account.email);\n        this.emit('email', parsed);\n      }\n\n      /* Resume IDLE. */\n      if (this.running && this.client.connected) {\n        await this.client.idle();\n      }\n    } catch (err) {\n      this.emit('error', err instanceof Error ? err : new Error(String(err)));\n    } finally {\n      this.fetchingInProgress = false;\n\n      /* Catch up on any EXISTS that arrived while we were fetching. */\n      if (this.pendingExistsCount > this.existsCount) {\n        const catchUp = this.pendingExistsCount;\n        this.pendingExistsCount = 0;\n        void this.handleExists(catchUp).catch((err: unknown) => {\n          this.emit('error', err instanceof Error ? err : new Error(String(err)));\n        });\n      }\n    }\n  }\n\n  /**\n   * Handle a disconnect — schedule reconnection if still running.\n   */\n  private handleDisconnect(): void {\n    this.client = null;\n    this.emit('disconnected', this.account.id);\n    if (this.running) {\n      this.scheduleReconnect();\n    }\n  }\n\n  /**\n   * Schedule a reconnect attempt with exponential backoff.\n   */\n  private scheduleReconnect(): void {\n    if (!this.running) return;\n\n    if (this.reconnectTimer !== null) {\n      clearTimeout(this.reconnectTimer);\n      this.reconnectTimer = null;\n    }\n\n    const delay = Math.min(\n      BASE_RECONNECT_DELAY * 2 ** this.reconnectAttempts,\n      MAX_RECONNECT_DELAY,\n    );\n    this.reconnectAttempts++;\n\n    this.reconnectTimer = setTimeout(() => {\n      this.reconnectTimer = null;\n      if (this.running) {\n        void this.connectAndWatch();\n      }\n    }, delay);\n  }\n\n  /**\n   * Get a fresh access token by decrypting credentials and refreshing.\n   */\n  private async getAccessToken(): Promise<string> {\n    const refreshToken = decrypt(this.account.refreshToken, this.encryptionKey);\n    const clientSecret = decrypt(this.oauthCredentials.clientSecret, this.encryptionKey);\n    const result = await refreshAccessToken(refreshToken, this.oauthCredentials.clientId, clientSecret);\n    return result.accessToken;\n  }\n}\n","/**\n * Lightweight email parser for extracting headers and text body\n * from raw IMAP FETCH response fields.\n *\n * No external dependencies — pure string manipulation.\n * Handles only what we need for forwarding emails to agents:\n * From, To, Subject, Date, Message-ID, and plain text body.\n */\n\nimport type { ParsedEmail } from '@repo/types';\n\n/**\n * Parse structured email data from raw IMAP FETCH fields.\n *\n * @param headerFields - raw header block (e.g. from BODY[HEADER.FIELDS (...)])\n * @param textBody - raw text body (e.g. from BODY[TEXT])\n * @param uid - the IMAP UID of the message\n * @param accountEmail - the Gmail address that received this email\n * @returns a ParsedEmail with extracted fields\n */\nexport const parseEmail = (\n  headerFields: string,\n  textBody: string,\n  uid: number,\n  accountEmail: string,\n): ParsedEmail => {\n  const headers = parseHeaders(headerFields);\n\n  return {\n    uid,\n    messageId: headers.get('message-id') ?? '',\n    from: decodeHeader(headers.get('from') ?? ''),\n    to: splitAddresses(decodeHeader(headers.get('to') ?? '')),\n    subject: decodeHeader(headers.get('subject') ?? ''),\n    date: headers.get('date') ?? new Date().toISOString(),\n    textBody: cleanTextBody(textBody),\n    accountEmail,\n  };\n};\n\n/**\n * Parse RFC 2822 headers from a raw header block.\n * Handles header continuation (lines starting with whitespace).\n *\n * @param raw - raw header text\n * @returns Map of lowercase header names to values\n */\nexport const parseHeaders = (raw: string): Map<string, string> => {\n  const headers = new Map<string, string>();\n  const lines = raw.split(/\\r?\\n/);\n\n  let currentKey = '';\n  let currentValue = '';\n\n  for (const line of lines) {\n    if (line === '') continue;\n\n    if (/^\\s/.test(line)) {\n      /* Continuation of the previous header (folded header). */\n      currentValue += ' ' + line.trim();\n    } else {\n      /* New header — save the previous one first. */\n      if (currentKey) {\n        headers.set(currentKey, currentValue);\n      }\n\n      const colonIdx = line.indexOf(':');\n      if (colonIdx === -1) continue;\n\n      currentKey = line.slice(0, colonIdx).trim().toLowerCase();\n      currentValue = line.slice(colonIdx + 1).trim();\n    }\n  }\n\n  /* Save the last header. */\n  if (currentKey) {\n    headers.set(currentKey, currentValue);\n  }\n\n  return headers;\n};\n\n/**\n * Decode RFC 2047 encoded-word sequences in header values.\n * Supports =?charset?Q?...?= (quoted-printable) and =?charset?B?...?= (base64).\n *\n * @param value - raw header value potentially containing encoded words\n * @returns decoded string\n */\nexport const decodeHeader = (value: string): string =>\n  value.replace(/=\\?([^?]+)\\?([BQ])\\?([^?]*)\\?=/gi, (_match, _charset, encoding, encoded) => {\n    const enc = (encoding as string).toUpperCase();\n\n    if (enc === 'B') {\n      return Buffer.from(encoded as string, 'base64').toString('utf8');\n    }\n\n    if (enc === 'Q') {\n      const qpDecoded = (encoded as string).replace(/_/g, ' ').replace(/=([0-9A-Fa-f]{2})/g, (_m, hex) =>\n        String.fromCharCode(parseInt(hex as string, 16)),\n      );\n      return qpDecoded;\n    }\n\n    return encoded as string;\n  });\n\n/**\n * Split a comma-separated address list into individual addresses.\n *\n * @param addressList - raw To/CC header value\n * @returns array of individual address strings\n */\nexport const splitAddresses = (addressList: string): string[] =>\n  addressList\n    .split(',')\n    .map((a) => a.trim())\n    .filter(Boolean);\n\n/**\n * Clean up a raw text body: remove trailing IMAP artifacts\n * and normalize line endings.\n *\n * @param text - raw text body from FETCH\n * @returns cleaned text\n */\nconst cleanTextBody = (text: string): string =>\n  text\n    .replace(/\\)\\r?\\n?$/, '')\n    .replace(/\\r\\n/g, '\\n')\n    .trim();\n","/**\n * Routes incoming emails to target agents based on configured connections.\n *\n * When an email arrives on a Gmail account, the router looks up all\n * enabled connections for that account and sends an IPC prompt message\n * to each target agent.\n */\n\nimport type { EmailConnectionConfig, ParsedEmail, PromptPayload } from '@repo/types';\nimport { createMessage } from '@repo/ipc';\nimport type { IpcMessage } from '@repo/types';\n\n/**\n * Connection routing configuration and message builder.\n */\nexport interface ConnectionRouter {\n  /** Update the routing table with new connections. */\n  updateConnections: (connections: EmailConnectionConfig[]) => void;\n\n  /** Route an email to all matching target agents. Returns the IPC messages to send. */\n  route: (email: ParsedEmail, accountId: string, senderId: string) => IpcMessage[];\n}\n\n/**\n * Create a ConnectionRouter that maps email accounts to target agents.\n *\n * @param initialConnections - initial set of email connections\n * @returns a ConnectionRouter instance\n */\nexport const createConnectionRouter = (\n  initialConnections: EmailConnectionConfig[] = [],\n): ConnectionRouter => {\n  let connections = initialConnections;\n\n  return {\n    updateConnections(newConnections) {\n      connections = newConnections;\n    },\n\n    route(email, accountId, senderId) {\n      const matching = connections.filter(\n        (c) => c.accountId === accountId && c.enabled,\n      );\n\n      return matching.map((conn) => {\n        const payload: PromptPayload = {\n          text: formatEmailPrompt(conn.command, email),\n          metadata: {\n            source: 'email',\n            command: conn.command,\n            accountEmail: email.accountEmail,\n            from: email.from,\n            subject: email.subject,\n            messageId: email.messageId,\n            uid: email.uid,\n            connectionId: conn.id,\n          },\n        };\n\n        return createMessage(senderId, conn.targetAgent, 'prompt', payload);\n      });\n    },\n  };\n};\n\n/**\n * Format a parsed email into the agent prompt string.\n *\n * Uses the same `/<command>` prefix pattern as cron-runner,\n * followed by the email context and body content.\n *\n * @param command - the agent command to invoke\n * @param email - the parsed email\n * @returns formatted prompt: `/<command> [New email received in account <email>] <content>`\n */\nconst formatEmailPrompt = (command: string, email: ParsedEmail): string => {\n  const header = [\n    `From: ${email.from}`,\n    `To: ${email.to.join(', ')}`,\n    `Subject: ${email.subject}`,\n    `Date: ${email.date}`,\n  ];\n\n  if (email.messageId) {\n    header.push(`Message-ID: ${email.messageId}`);\n  }\n\n  const body = email.textBody || '(no text body)';\n\n  return `/${command} [New email received in account ${email.accountEmail}]\\n${header.join('\\n')}\\n\\n${body}`;\n};\n"],"mappings":";;;;;AASA,SAAS,WAAW,kBAAkC;AACtD,SAAS,oBAAoB;AAG7B,IAAM,aAAa;AAGnB,IAAM,aAAa;AAGnB,IAAM,kBAAkB;AAkCjB,IAAM,aAAN,cAAyB,aAA+B;AAAA,EACrD,SAA2B;AAAA,EAC3B,aAAa;AAAA,EACb,SAAS;AAAA,EACT,SAAS;AAAA;AAAA;AAAA;AAAA;AAAA,EAMT,UAMG;AAAA;AAAA;AAAA;AAAA;AAAA,EAMX,MAAM,UAAyB;AAC7B,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,WAAK,SAAS,WAAW,EAAE,MAAM,YAAY,MAAM,WAAW,GAAG,MAAM;AAAA,MAEvE,CAAC;AAED,WAAK,OAAO,YAAY,MAAM;AAE9B,UAAI,UAAU;AAEd,WAAK,OAAO,GAAG,QAAQ,CAAC,UAAkB;AACxC,aAAK,UAAU;AACf,aAAK,cAAc,SAAS,MAAM;AAChC,oBAAU;AACV,kBAAQ;AAAA,QACV,CAAC;AAAA,MACH,CAAC;AAED,WAAK,OAAO,GAAG,SAAS,CAAC,QAAQ;AAC/B,YAAI,CAAC,SAAS;AACZ,iBAAO,GAAG;AACV;AAAA,QACF;AACA,aAAK,KAAK,SAAS,GAAG;AAAA,MACxB,CAAC;AAED,WAAK,OAAO,GAAG,SAAS,MAAM,KAAK,KAAK,OAAO,CAAC;AAAA,IAClD,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,aAAa,OAA8B;AAC/C,UAAM,QAAQ,MAAM,KAAK,YAAY,wBAAwB,KAAK,EAAE;AACpE,UAAM,SAAS,MAAM,MAAM,SAAS,CAAC,KAAK;AAC1C,QAAI,CAAC,OAAO,SAAS,IAAI,GAAG;AAC1B,YAAM,IAAI,MAAM,kCAAkC,MAAM,EAAE;AAAA,IAC5D;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAQA,MAAM,OAAO,UAAU,SAA0B;AAC/C,UAAM,QAAQ,MAAM,KAAK,YAAY,WAAW,OAAO,GAAG;AAC1D,QAAI,SAAS;AACb,eAAW,QAAQ,OAAO;AACxB,YAAM,QAAQ,mBAAmB,KAAK,IAAI;AAC1C,UAAI,MAAO,UAAS,SAAS,MAAM,CAAC,GAAI,EAAE;AAAA,IAC5C;AACA,WAAO;AAAA,EACT;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAM,OAAsB;AAC1B,SAAK,SAAS;AACd,UAAM,MAAM,KAAK,QAAQ;AACzB,SAAK,MAAM,GAAG,GAAG;AAAA,CAAW;AAG5B,UAAM,IAAI,QAAc,CAAC,SAAS,WAAW;AAC3C,YAAM,UAAU,WAAW,MAAM;AAC/B,aAAK,QAAQ,eAAe,QAAQ,KAAK;AACzC,eAAO,IAAI,MAAM,2BAA2B,CAAC;AAAA,MAC/C,GAAG,eAAe;AAElB,YAAM,QAAQ,MAAY;AACxB,cAAM,MAAM,KAAK,OAAO,QAAQ,MAAM;AACtC,YAAI,QAAQ,GAAI;AAChB,cAAM,OAAO,KAAK,OAAO,MAAM,GAAG,GAAG;AACrC,aAAK,SAAS,KAAK,OAAO,MAAM,MAAM,CAAC;AAEvC,YAAI,KAAK,WAAW,GAAG,GAAG;AACxB,uBAAa,OAAO;AACpB,eAAK,QAAQ,eAAe,QAAQ,KAAK;AACzC,eAAK,UAAU;AAAA,YACb;AAAA,YACA,SAAS,MAAM;AAAA,YAAC;AAAA,YAChB,QAAQ,MAAM;AAAA,YAAC;AAAA,YACf,OAAO,CAAC;AAAA,YACR,OAAO,WAAW,MAAM;AAAA,YAAC,GAAG,CAAC;AAAA,UAC/B;AACA,uBAAa,KAAK,QAAQ,KAAK;AAC/B,kBAAQ;AAAA,QACV,OAAO;AACL,eAAK,eAAe,IAAI;AACxB,gBAAM;AAAA,QACR;AAAA,MACF;AAEA,WAAK,QAAQ,GAAG,QAAQ,KAAK;AAG7B,YAAM;AAAA,IACR,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA;AAAA,EAMA,MAAM,OAAsB;AAC1B,QAAI,CAAC,KAAK,UAAU,CAAC,KAAK,QAAS;AACnC,SAAK,SAAS;AAEd,UAAM,MAAM,KAAK,QAAQ;AAEzB,UAAM,SAAS,IAAI,QAAc,CAAC,SAAS,WAAW;AACpD,YAAM,UAAU,WAAW,MAAM,OAAO,IAAI,MAAM,mBAAmB,CAAC,GAAG,eAAe;AAExF,WAAK,UAAU;AAAA,QACb;AAAA,QACA,SAAS,MAAM;AACb,uBAAa,OAAO;AACpB,kBAAQ;AAAA,QACV;AAAA,QACA,QAAQ,CAAC,QAAQ;AACf,uBAAa,OAAO;AACpB,iBAAO,GAAG;AAAA,QACZ;AAAA,QACA,OAAO,CAAC;AAAA,QACR,OAAO;AAAA,MACT;AAAA,IACF,CAAC;AAED,SAAK,MAAM,UAAU;AACrB,UAAM;AAAA,EACR;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAUA,MAAM,MAAM,OAAe,QAAsC;AAC/D,UAAM,QAAQ,MAAM,KAAK,YAAY,SAAS,KAAK,KAAK,MAAM,GAAG;AACjE,WAAO,mBAAmB,KAAK;AAAA,EACjC;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,SAAwB;AAC5B,QAAI;AACF,YAAM,KAAK,YAAY,QAAQ;AAAA,IACjC,QAAQ;AAAA,IAER;AACA,SAAK,QAAQ,QAAQ;AACrB,SAAK,SAAS;AAAA,EAChB;AAAA;AAAA;AAAA;AAAA,EAKA,IAAI,YAAqB;AACvB,WAAO,KAAK,WAAW,QAAQ,CAAC,KAAK,OAAO;AAAA,EAC9C;AAAA;AAAA;AAAA;AAAA,EAKQ,UAAkB;AACxB,SAAK;AACL,WAAO,IAAI,OAAO,KAAK,UAAU,EAAE,SAAS,GAAG,GAAG,CAAC;AAAA,EACrD;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,YAAY,SAAoC;AACtD,UAAM,MAAM,KAAK,QAAQ;AAEzB,WAAO,IAAI,QAAQ,CAAC,SAAS,WAAW;AACtC,YAAM,QAAQ,WAAW,MAAM;AAC7B,aAAK,UAAU;AACf,eAAO,IAAI,MAAM,oBAAoB,GAAG,IAAI,OAAO,EAAE,CAAC;AAAA,MACxD,GAAG,eAAe;AAElB,WAAK,UAAU;AAAA,QACb;AAAA,QACA,SAAS,CAAC,UAAU;AAClB,uBAAa,KAAK;AAClB,kBAAQ,KAAK;AAAA,QACf;AAAA,QACA,QAAQ,CAAC,QAAQ;AACf,uBAAa,KAAK;AAClB,iBAAO,GAAG;AAAA,QACZ;AAAA,QACA,OAAO,CAAC;AAAA,QACR;AAAA,MACF;AAEA,UAAI;AACF,aAAK,MAAM,GAAG,GAAG,IAAI,OAAO;AAAA,CAAM;AAAA,MACpC,SAAS,KAAK;AACZ,qBAAa,KAAK;AAClB,aAAK,UAAU;AACf,eAAO,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAAA,MAC5D;AAAA,IACF,CAAC;AAAA,EACH;AAAA;AAAA;AAAA;AAAA,EAKQ,MAAM,MAAoB;AAChC,QAAI,CAAC,KAAK,UAAU,KAAK,OAAO,WAAW;AACzC,YAAM,IAAI,MAAM,sBAAsB;AAAA,IACxC;AACA,SAAK,OAAO,MAAM,IAAI;AAAA,EACxB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EASQ,cAAc,SAAkB,YAA8B;AACpE,WAAO,MAAM;AACX,YAAM,MAAM,KAAK,OAAO,QAAQ,MAAM;AACtC,UAAI,QAAQ,GAAI;AAEhB,YAAM,OAAO,KAAK,OAAO,MAAM,GAAG,GAAG;AACrC,WAAK,SAAS,KAAK,OAAO,MAAM,MAAM,CAAC;AAEvC,UAAI,CAAC,WAAW,KAAK,WAAW,MAAM,GAAG;AACvC,mBAAW;AACX;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,IAAI,GAAG;AACzB,aAAK,eAAe,IAAI;AACxB,aAAK,SAAS,MAAM,KAAK,IAAI;AAC7B;AAAA,MACF;AAEA,UAAI,KAAK,WAAW,GAAG,GAAG;AAExB;AAAA,MACF;AAGA,UAAI,KAAK,WAAW,KAAK,WAAW,KAAK,QAAQ,GAAG,GAAG;AACrD,cAAM,IAAI,KAAK;AACf,UAAE,MAAM,KAAK,IAAI;AACjB,aAAK,UAAU;AAEf,YAAI,KAAK,SAAS,IAAI,GAAG;AACvB,YAAE,QAAQ,EAAE,KAAK;AAAA,QACnB,OAAO;AACL,YAAE,OAAO,IAAI,MAAM,eAAe,IAAI,EAAE,CAAC;AAAA,QAC3C;AAAA,MACF;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA,EAMQ,eAAe,MAAoB;AACzC,UAAM,cAAc,mBAAmB,KAAK,IAAI;AAChD,QAAI,eAAe,KAAK,QAAQ;AAC9B,WAAK,KAAK,UAAU,SAAS,YAAY,CAAC,GAAI,EAAE,CAAC;AAAA,IACnD;AAAA,EACF;AACF;AAWO,IAAM,qBAAqB,CAAC,UAAiC;AAClE,QAAM,QAAqB,CAAC;AAC5B,MAAI,UAA4B;AAEhC,aAAW,QAAQ,OAAO;AACxB,UAAM,aAAa,yBAAyB,KAAK,IAAI;AACrD,QAAI,YAAY;AACd,gBAAU,EAAE,KAAK,SAAS,WAAW,CAAC,GAAI,EAAE,GAAG,QAAQ,oBAAI,IAAI,EAAE;AACjE,YAAM,KAAK,OAAO;AAClB,6BAAuB,WAAW,CAAC,GAAI,OAAO;AAC9C;AAAA,IACF;AAGA,QAAI,WAAW,QAAQ,OAAO,OAAO,GAAG;AACtC,YAAM,UAAU,CAAC,GAAG,QAAQ,OAAO,KAAK,CAAC,EAAE,IAAI;AAC/C,YAAM,OAAO,QAAQ,OAAO,IAAI,OAAO,KAAK;AAC5C,cAAQ,OAAO,IAAI,SAAS,OAAO,GAAG,IAAI;AAAA,EAAK,IAAI,KAAK,IAAI;AAAA,IAC9D;AAAA,EACF;AAEA,SAAO;AACT;AASA,IAAM,yBAAyB,CAAC,MAAc,SAA0B;AAEtE,QAAM,WAAW,YAAY,KAAK,IAAI;AACtC,MAAI,SAAU,MAAK,MAAM,SAAS,SAAS,CAAC,GAAI,EAAE;AAGlD,QAAM,YAAY;AAClB,MAAI;AACJ,UAAQ,QAAQ,UAAU,KAAK,IAAI,OAAO,MAAM;AAC9C,UAAM,MAAM,QAAQ,MAAM,CAAC,CAAC;AAC5B,UAAM,aAAa,KAAK,MAAM,MAAM,QAAQ,MAAM,CAAC,EAAE,MAAM;AAE3D,UAAM,YAAY,WAAW,OAAO,wBAAwB;AAC5D,UAAM,QAAQ,cAAc,KAAK,aAAa,WAAW,MAAM,GAAG,SAAS;AAC3E,SAAK,OAAO,IAAI,KAAK,MAAM,KAAK,CAAC;AAAA,EACnC;AACF;;;ACtZA,IAAM,YAAY;AAGlB,IAAM,WAAW;AAGjB,IAAM,SAAS,CAAC,4BAA4B,OAAO;AA6B5C,IAAM,qBAAqB,OAChC,cACA,UACA,iBAC2B;AAC3B,QAAM,OAAO,IAAI,gBAAgB;AAAA,IAC/B,YAAY;AAAA,IACZ,eAAe;AAAA,IACf,WAAW;AAAA,IACX,eAAe;AAAA,EACjB,CAAC;AAED,QAAM,MAAM,MAAM,MAAM,WAAW;AAAA,IACjC,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,IAC/D,MAAM,KAAK,SAAS;AAAA,EACtB,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,+BAA+B,IAAI,MAAM,MAAM,IAAI,EAAE;AAAA,EACvE;AAEA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAC7B,SAAO,EAAE,aAAa,KAAK,cAAc,WAAW,KAAK,WAAW;AACtE;AAWO,IAAM,wBAAwB,OACnC,MACA,UACA,cACA,gBACkC;AAClC,QAAM,OAAO,IAAI,gBAAgB;AAAA,IAC/B,YAAY;AAAA,IACZ;AAAA,IACA,WAAW;AAAA,IACX,eAAe;AAAA,IACf,cAAc;AAAA,EAChB,CAAC;AAED,QAAM,MAAM,MAAM,MAAM,WAAW;AAAA,IACjC,QAAQ;AAAA,IACR,SAAS,EAAE,gBAAgB,oCAAoC;AAAA,IAC/D,MAAM,KAAK,SAAS;AAAA,EACtB,CAAC;AAED,MAAI,CAAC,IAAI,IAAI;AACX,UAAM,OAAO,MAAM,IAAI,KAAK;AAC5B,UAAM,IAAI,MAAM,+BAA+B,IAAI,MAAM,MAAM,IAAI,EAAE;AAAA,EACvE;AAEA,QAAM,OAAQ,MAAM,IAAI,KAAK;AAM7B,SAAO;AAAA,IACL,aAAa,KAAK;AAAA,IAClB,cAAc,KAAK;AAAA,IACnB,WAAW,KAAK;AAAA,EAClB;AACF;AAUO,IAAM,kBAAkB,CAAC,UAAkB,aAAqB,UAA2B;AAChG,QAAM,SAAS,IAAI,gBAAgB;AAAA,IACjC,WAAW;AAAA,IACX,cAAc;AAAA,IACd,eAAe;AAAA,IACf,OAAO,OAAO,KAAK,GAAG;AAAA,IACtB,aAAa;AAAA,IACb,QAAQ;AAAA,EACV,CAAC;AAED,MAAI,MAAO,QAAO,IAAI,SAAS,KAAK;AAEpC,SAAO,GAAG,QAAQ,IAAI,OAAO,SAAS,CAAC;AACzC;AAWO,IAAM,oBAAoB,CAAC,OAAe,gBAAgC;AAC/E,QAAM,MAAM,QAAQ,KAAK,gBAAmB,WAAW;AACvD,SAAO,OAAO,KAAK,GAAG,EAAE,SAAS,QAAQ;AAC3C;;;ACrJA,SAAS,aAAa,gBAAgB,wBAAwB;AAC9D,SAAS,cAAc,eAAe,iBAAiB;AACvD,SAAS,YAAY;AACrB,SAAS,eAAe;AAMxB,IAAM,YAAY;AAOlB,IAAM,UAAU,MACd,KAAK,QAAQ,IAAI,mBAAmB,KAAK,KAAK,QAAQ,GAAG,WAAW,GAAG,YAAY;AAQ9E,IAAM,iBAAiB,MAAc;AAC1C,QAAM,OAAO,QAAQ;AAErB,MAAI;AACF,WAAO,aAAa,MAAM,OAAO,EAAE,KAAK;AAAA,EAC1C,QAAQ;AACN,UAAM,MAAM,YAAY,EAAE,EAAE,SAAS,KAAK;AAC1C,cAAU,KAAK,MAAM,IAAI,GAAG,EAAE,WAAW,KAAK,CAAC;AAC/C,kBAAc,MAAM,KAAK,EAAE,MAAM,IAAM,CAAC;AACxC,WAAO;AAAA,EACT;AACF;AAyBO,IAAM,UAAU,CAAC,MAAc,QAAwB;AAC5D,MAAI,CAAC,KAAM,QAAO;AAClB,MAAI,CAAC,KAAK,SAAS,GAAG,GAAG;AACvB,YAAQ,KAAK,yJAAoJ;AACjK,WAAO;AAAA,EACT;AACA,QAAM,CAAC,OAAO,SAAS,IAAI,KAAK,MAAM,GAAG;AACzC,QAAM,WAAW,iBAAiB,WAAW,OAAO,KAAK,KAAK,KAAK,GAAG,OAAO,KAAK,OAAO,KAAK,CAAC;AAC/F,MAAI,YAAY,SAAS,OAAO,WAAW,OAAO,MAAM;AACxD,eAAa,SAAS,MAAM,MAAM;AAClC,SAAO;AACT;;;ACrEA,SAAS,gBAAAA,qBAAoB;;;ACYtB,IAAM,aAAa,CACxB,cACA,UACA,KACA,iBACgB;AAChB,QAAM,UAAU,aAAa,YAAY;AAEzC,SAAO;AAAA,IACL;AAAA,IACA,WAAW,QAAQ,IAAI,YAAY,KAAK;AAAA,IACxC,MAAM,aAAa,QAAQ,IAAI,MAAM,KAAK,EAAE;AAAA,IAC5C,IAAI,eAAe,aAAa,QAAQ,IAAI,IAAI,KAAK,EAAE,CAAC;AAAA,IACxD,SAAS,aAAa,QAAQ,IAAI,SAAS,KAAK,EAAE;AAAA,IAClD,MAAM,QAAQ,IAAI,MAAM,MAAK,oBAAI,KAAK,GAAE,YAAY;AAAA,IACpD,UAAU,cAAc,QAAQ;AAAA,IAChC;AAAA,EACF;AACF;AASO,IAAM,eAAe,CAAC,QAAqC;AAChE,QAAM,UAAU,oBAAI,IAAoB;AACxC,QAAM,QAAQ,IAAI,MAAM,OAAO;AAE/B,MAAI,aAAa;AACjB,MAAI,eAAe;AAEnB,aAAW,QAAQ,OAAO;AACxB,QAAI,SAAS,GAAI;AAEjB,QAAI,MAAM,KAAK,IAAI,GAAG;AAEpB,sBAAgB,MAAM,KAAK,KAAK;AAAA,IAClC,OAAO;AAEL,UAAI,YAAY;AACd,gBAAQ,IAAI,YAAY,YAAY;AAAA,MACtC;AAEA,YAAM,WAAW,KAAK,QAAQ,GAAG;AACjC,UAAI,aAAa,GAAI;AAErB,mBAAa,KAAK,MAAM,GAAG,QAAQ,EAAE,KAAK,EAAE,YAAY;AACxD,qBAAe,KAAK,MAAM,WAAW,CAAC,EAAE,KAAK;AAAA,IAC/C;AAAA,EACF;AAGA,MAAI,YAAY;AACd,YAAQ,IAAI,YAAY,YAAY;AAAA,EACtC;AAEA,SAAO;AACT;AASO,IAAM,eAAe,CAAC,UAC3B,MAAM,QAAQ,oCAAoC,CAAC,QAAQ,UAAU,UAAU,YAAY;AACzF,QAAM,MAAO,SAAoB,YAAY;AAE7C,MAAI,QAAQ,KAAK;AACf,WAAO,OAAO,KAAK,SAAmB,QAAQ,EAAE,SAAS,MAAM;AAAA,EACjE;AAEA,MAAI,QAAQ,KAAK;AACf,UAAM,YAAa,QAAmB,QAAQ,MAAM,GAAG,EAAE;AAAA,MAAQ;AAAA,MAAsB,CAAC,IAAI,QAC1F,OAAO,aAAa,SAAS,KAAe,EAAE,CAAC;AAAA,IACjD;AACA,WAAO;AAAA,EACT;AAEA,SAAO;AACT,CAAC;AAQI,IAAM,iBAAiB,CAAC,gBAC7B,YACG,MAAM,GAAG,EACT,IAAI,CAAC,MAAM,EAAE,KAAK,CAAC,EACnB,OAAO,OAAO;AASnB,IAAM,gBAAgB,CAAC,SACrB,KACG,QAAQ,aAAa,EAAE,EACvB,QAAQ,SAAS,IAAI,EACrB,KAAK;;;ADlHV,IAAM,eACJ;AAGF,IAAM,uBAAuB;AAG7B,IAAM,sBAAsB;AA0BrB,IAAM,cAAN,cAA0BC,cAAgC;AAAA,EACvD,SAA4B;AAAA,EAC5B;AAAA,EACA;AAAA,EACA;AAAA,EACA,UAAU;AAAA,EACV,oBAAoB;AAAA,EACpB,iBAAuD;AAAA,EACvD,cAAc;AAAA,EACd,qBAAqB;AAAA,EACrB,qBAAqB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAO7B,YAAY,SAA6B,kBAAoC,eAAuB;AAClG,UAAM;AACN,SAAK,UAAU;AACf,SAAK,mBAAmB;AACxB,SAAK,gBAAgB;AAAA,EACvB;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,QAAuB;AAC3B,SAAK,UAAU;AACf,UAAM,KAAK,gBAAgB;AAAA,EAC7B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAM,OAAsB;AAC1B,SAAK,UAAU;AACf,QAAI,KAAK,mBAAmB,MAAM;AAChC,mBAAa,KAAK,cAAc;AAChC,WAAK,iBAAiB;AAAA,IACxB;AACA,QAAI,KAAK,QAAQ;AACf,UAAI;AACF,cAAM,KAAK,OAAO,KAAK;AAAA,MACzB,QAAQ;AAAA,MAER;AACA,YAAM,KAAK,OAAO,OAAO;AACzB,WAAK,SAAS;AAAA,IAChB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,cAAc,SAAmC;AAC/C,SAAK,UAAU;AAAA,EACjB;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,uBAAuB,OAA+B;AACpD,SAAK,mBAAmB;AAAA,EAC1B;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,kBAAiC;AAC7C,QAAI;AACF,WAAK,SAAS,IAAI,WAAW;AAC7B,YAAM,KAAK,OAAO,QAAQ;AAE1B,YAAM,cAAc,MAAM,KAAK,eAAe;AAC9C,YAAM,eAAe,kBAAkB,KAAK,QAAQ,OAAO,WAAW;AACtE,YAAM,KAAK,OAAO,aAAa,YAAY;AAE3C,WAAK,cAAc,MAAM,KAAK,OAAO,OAAO,OAAO;AACnD,WAAK,oBAAoB;AAEzB,WAAK,OAAO,GAAG,UAAU,CAAC,UAAU,KAAK,aAAa,KAAK,CAAC;AAC5D,WAAK,OAAO,GAAG,SAAS,MAAM,KAAK,iBAAiB,CAAC;AACrD,WAAK,OAAO,GAAG,SAAS,CAAC,QAAQ,KAAK,KAAK,SAAS,GAAG,CAAC;AAExD,YAAM,KAAK,OAAO,KAAK;AAAA,IACzB,SAAS,KAAK;AACZ,WAAK,KAAK,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AACtE,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA;AAAA;AAAA,EAOA,MAAc,aAAa,UAAiC;AAC1D,QAAI,YAAY,KAAK,eAAe,CAAC,KAAK,OAAQ;AAElD,QAAI,KAAK,oBAAoB;AAC3B,WAAK,qBAAqB,KAAK,IAAI,KAAK,oBAAoB,QAAQ;AACpE;AAAA,IACF;AAEA,SAAK,qBAAqB;AAC1B,SAAK,qBAAqB;AAE1B,UAAM,WAAW,KAAK,cAAc;AACpC,SAAK,cAAc;AAEnB,QAAI;AACF,YAAM,KAAK,OAAO,KAAK;AAEvB,YAAM,QAAQ,MAAM,KAAK,OAAO,MAAM,GAAG,QAAQ,MAAM,YAAY;AAEnE,iBAAW,QAAQ,OAAO;AACxB,cAAM,YAAY,KAAK,OAAO,IAAI,uDAAuD,KAAK;AAC9F,cAAM,UAAU,KAAK,OAAO,IAAI,YAAY,KAAK;AACjD,cAAM,MAAM,KAAK,OAAO,KAAK;AAE7B,cAAM,SAAS,WAAW,WAAW,SAAS,KAAK,KAAK,QAAQ,KAAK;AACrE,aAAK,KAAK,SAAS,MAAM;AAAA,MAC3B;AAGA,UAAI,KAAK,WAAW,KAAK,OAAO,WAAW;AACzC,cAAM,KAAK,OAAO,KAAK;AAAA,MACzB;AAAA,IACF,SAAS,KAAK;AACZ,WAAK,KAAK,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAAA,IACxE,UAAE;AACA,WAAK,qBAAqB;AAG1B,UAAI,KAAK,qBAAqB,KAAK,aAAa;AAC9C,cAAM,UAAU,KAAK;AACrB,aAAK,qBAAqB;AAC1B,aAAK,KAAK,aAAa,OAAO,EAAE,MAAM,CAAC,QAAiB;AACtD,eAAK,KAAK,SAAS,eAAe,QAAQ,MAAM,IAAI,MAAM,OAAO,GAAG,CAAC,CAAC;AAAA,QACxE,CAAC;AAAA,MACH;AAAA,IACF;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,mBAAyB;AAC/B,SAAK,SAAS;AACd,SAAK,KAAK,gBAAgB,KAAK,QAAQ,EAAE;AACzC,QAAI,KAAK,SAAS;AAChB,WAAK,kBAAkB;AAAA,IACzB;AAAA,EACF;AAAA;AAAA;AAAA;AAAA,EAKQ,oBAA0B;AAChC,QAAI,CAAC,KAAK,QAAS;AAEnB,QAAI,KAAK,mBAAmB,MAAM;AAChC,mBAAa,KAAK,cAAc;AAChC,WAAK,iBAAiB;AAAA,IACxB;AAEA,UAAM,QAAQ,KAAK;AAAA,MACjB,uBAAuB,KAAK,KAAK;AAAA,MACjC;AAAA,IACF;AACA,SAAK;AAEL,SAAK,iBAAiB,WAAW,MAAM;AACrC,WAAK,iBAAiB;AACtB,UAAI,KAAK,SAAS;AAChB,aAAK,KAAK,gBAAgB;AAAA,MAC5B;AAAA,IACF,GAAG,KAAK;AAAA,EACV;AAAA;AAAA;AAAA;AAAA,EAKA,MAAc,iBAAkC;AAC9C,UAAM,eAAe,QAAQ,KAAK,QAAQ,cAAc,KAAK,aAAa;AAC1E,UAAM,eAAe,QAAQ,KAAK,iBAAiB,cAAc,KAAK,aAAa;AACnF,UAAM,SAAS,MAAM,mBAAmB,cAAc,KAAK,iBAAiB,UAAU,YAAY;AAClG,WAAO,OAAO;AAAA,EAChB;AACF;;;AEtNO,IAAM,yBAAyB,CACpC,qBAA8C,CAAC,MAC1B;AACrB,MAAI,cAAc;AAElB,SAAO;AAAA,IACL,kBAAkB,gBAAgB;AAChC,oBAAc;AAAA,IAChB;AAAA,IAEA,MAAM,OAAO,WAAW,UAAU;AAChC,YAAM,WAAW,YAAY;AAAA,QAC3B,CAAC,MAAM,EAAE,cAAc,aAAa,EAAE;AAAA,MACxC;AAEA,aAAO,SAAS,IAAI,CAAC,SAAS;AAC5B,cAAM,UAAyB;AAAA,UAC7B,MAAM,kBAAkB,KAAK,SAAS,KAAK;AAAA,UAC3C,UAAU;AAAA,YACR,QAAQ;AAAA,YACR,SAAS,KAAK;AAAA,YACd,cAAc,MAAM;AAAA,YACpB,MAAM,MAAM;AAAA,YACZ,SAAS,MAAM;AAAA,YACf,WAAW,MAAM;AAAA,YACjB,KAAK,MAAM;AAAA,YACX,cAAc,KAAK;AAAA,UACrB;AAAA,QACF;AAEA,eAAO,cAAc,UAAU,KAAK,aAAa,UAAU,OAAO;AAAA,MACpE,CAAC;AAAA,IACH;AAAA,EACF;AACF;AAYA,IAAM,oBAAoB,CAAC,SAAiB,UAA+B;AACzE,QAAM,SAAS;AAAA,IACb,SAAS,MAAM,IAAI;AAAA,IACnB,OAAO,MAAM,GAAG,KAAK,IAAI,CAAC;AAAA,IAC1B,YAAY,MAAM,OAAO;AAAA,IACzB,SAAS,MAAM,IAAI;AAAA,EACrB;AAEA,MAAI,MAAM,WAAW;AACnB,WAAO,KAAK,eAAe,MAAM,SAAS,EAAE;AAAA,EAC9C;AAEA,QAAM,OAAO,MAAM,YAAY;AAE/B,SAAO,IAAI,OAAO,mCAAmC,MAAM,YAAY;AAAA,EAAM,OAAO,KAAK,IAAI,CAAC;AAAA;AAAA,EAAO,IAAI;AAC3G;","names":["EventEmitter","EventEmitter"]}

package/chunk-GZFR7ELC.js

@@ -0,0 +1,98 @@
+// ../s3/src/client.ts
+import {
+  S3Client,
+  PutObjectCommand,
+  GetObjectCommand,
+  DeleteObjectCommand,
+  ListObjectsV2Command,
+  HeadObjectCommand,
+  HeadBucketCommand
+} from "@aws-sdk/client-s3";
+import { getSignedUrl } from "@aws-sdk/s3-request-presigner";
+import { fromIni } from "@aws-sdk/credential-provider-ini";
+var createS3Bucket = (config) => {
+  const client = new S3Client({
+    region: config.region,
+    ...config.profile && {
+      credentials: fromIni({ profile: config.profile })
+    }
+  });
+  const baseUrl = `https://${config.bucket}.s3.${config.region}.amazonaws.com`;
+  return {
+    async upload(key, body, contentType) {
+      await client.send(new PutObjectCommand({
+        Bucket: config.bucket,
+        Key: key,
+        Body: body,
+        ContentType: contentType
+      }));
+      return `${baseUrl}/${key}`;
+    },
+    async download(key) {
+      const res = await client.send(new GetObjectCommand({
+        Bucket: config.bucket,
+        Key: key
+      }));
+      const stream = res.Body;
+      if (!stream) throw new Error(`Empty response for key: ${key}`);
+      return Buffer.from(await stream.transformToByteArray());
+    },
+    async remove(key) {
+      await client.send(new DeleteObjectCommand({
+        Bucket: config.bucket,
+        Key: key
+      }));
+    },
+    async list(prefix) {
+      const res = await client.send(new ListObjectsV2Command({
+        Bucket: config.bucket,
+        Prefix: prefix
+      }));
+      return (res.Contents ?? []).map((obj) => ({
+        key: obj.Key ?? "",
+        size: obj.Size ?? 0,
+        lastModified: obj.LastModified
+      }));
+    },
+    async head(key) {
+      try {
+        const res = await client.send(new HeadObjectCommand({
+          Bucket: config.bucket,
+          Key: key
+        }));
+        return {
+          key,
+          size: res.ContentLength ?? 0,
+          lastModified: res.LastModified,
+          contentType: res.ContentType
+        };
+      } catch {
+        return null;
+      }
+    },
+    async presign(key, expiresInSeconds = 3600) {
+      const command = new GetObjectCommand({ Bucket: config.bucket, Key: key });
+      return getSignedUrl(client, command, { expiresIn: expiresInSeconds });
+    },
+    publicUrl(key) {
+      return `${baseUrl}/${key}`;
+    },
+    async verify() {
+      try {
+        await client.send(new HeadBucketCommand({ Bucket: config.bucket }));
+        return null;
+      } catch (err) {
+        const message = err instanceof Error ? err.message : String(err);
+        if (message.includes("403") || message.includes("Forbidden")) return "Access denied \u2014 check your AWS credentials and bucket permissions.";
+        if (message.includes("404") || message.includes("NotFound")) return `Bucket "${config.bucket}" not found in region "${config.region}".`;
+        if (message.includes("credentials") || message.includes("Credential")) return "Invalid AWS credentials \u2014 check your access key and secret.";
+        return `Connection failed: ${message}`;
+      }
+    }
+  };
+};
+
+export {
+  createS3Bucket
+};
+//# sourceMappingURL=chunk-GZFR7ELC.js.map

package/chunk-GZFR7ELC.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../s3/src/client.ts"],"sourcesContent":["import {\n  S3Client,\n  PutObjectCommand,\n  GetObjectCommand,\n  DeleteObjectCommand,\n  ListObjectsV2Command,\n  HeadObjectCommand,\n  HeadBucketCommand,\n} from '@aws-sdk/client-s3';\nimport { getSignedUrl } from '@aws-sdk/s3-request-presigner';\nimport { fromIni } from '@aws-sdk/credential-provider-ini';\n\n/**\n * Configuration for an S3 bucket connection.\n * Credentials come from AWS credentials chain or a named profile.\n */\nexport interface S3BucketConfig {\n  /** The S3 bucket name. */\n  bucket: string;\n\n  /** AWS region (e.g. \"us-east-1\", \"ap-south-1\"). */\n  region: string;\n\n  /** Optional AWS credentials profile name from ~/.aws/credentials. */\n  profile?: string;\n}\n\n/**\n * Metadata about an S3 object returned by list and head operations.\n */\nexport interface S3ObjectInfo {\n  /** The object key (path). */\n  key: string;\n\n  /** File size in bytes. */\n  size: number;\n\n  /** Last modified timestamp. */\n  lastModified: Date | undefined;\n\n  /** Content type (MIME). */\n  contentType?: string;\n}\n\n/**\n * A typed S3 client for a single bucket.\n * Provides upload, download, delete, list, and presigned URL operations.\n */\nexport interface S3Bucket {\n  /** Upload a file to the bucket. Returns the public URL. */\n  upload: (key: string, body: Buffer | Uint8Array, contentType: string) => Promise<string>;\n\n  /** Download a file from the bucket. Returns the body as a Buffer. */\n  download: (key: string) => Promise<Buffer>;\n\n  /** Delete a file from the bucket. */\n  remove: (key: string) => Promise<void>;\n\n  /** List objects under a prefix. */\n  list: (prefix?: string) => Promise<S3ObjectInfo[]>;\n\n  /** Check if an object exists. Returns metadata or null. */\n  head: (key: string) => Promise<S3ObjectInfo | null>;\n\n  /** Generate a presigned URL for temporary access. Default expiry: 1 hour. */\n  presign: (key: string, expiresInSeconds?: number) => Promise<string>;\n\n  /** Get the public URL for an object (assumes public read access). */\n  publicUrl: (key: string) => string;\n\n  /** Verify bucket access — checks credentials and bucket existence. Returns error message or null on success. */\n  verify: () => Promise<string | null>;\n}\n\n/**\n * Create an S3 client for a specific bucket.\n *\n * Uses AWS credentials from the default chain (env vars, ~/.aws/credentials,\n * instance profile) or a named profile if specified.\n *\n * @param config - bucket name, region, and optional credentials profile\n * @returns an S3Bucket client\n */\nexport const createS3Bucket = (config: S3BucketConfig): S3Bucket => {\n  const client = new S3Client({\n    region: config.region,\n    ...(config.profile && {\n      credentials: fromIni({ profile: config.profile }),\n    }),\n  });\n\n  const baseUrl = `https://${config.bucket}.s3.${config.region}.amazonaws.com`;\n\n  return {\n    async upload(key, body, contentType) {\n      await client.send(new PutObjectCommand({\n        Bucket: config.bucket,\n        Key: key,\n        Body: body,\n        ContentType: contentType,\n      }));\n      return `${baseUrl}/${key}`;\n    },\n\n    async download(key) {\n      const res = await client.send(new GetObjectCommand({\n        Bucket: config.bucket,\n        Key: key,\n      }));\n      const stream = res.Body;\n      if (!stream) throw new Error(`Empty response for key: ${key}`);\n      return Buffer.from(await stream.transformToByteArray());\n    },\n\n    async remove(key) {\n      await client.send(new DeleteObjectCommand({\n        Bucket: config.bucket,\n        Key: key,\n      }));\n    },\n\n    async list(prefix) {\n      const res = await client.send(new ListObjectsV2Command({\n        Bucket: config.bucket,\n        Prefix: prefix,\n      }));\n      return (res.Contents ?? []).map((obj) => ({\n        key: obj.Key ?? '',\n        size: obj.Size ?? 0,\n        lastModified: obj.LastModified,\n      }));\n    },\n\n    async head(key) {\n      try {\n        const res = await client.send(new HeadObjectCommand({\n          Bucket: config.bucket,\n          Key: key,\n        }));\n        return {\n          key,\n          size: res.ContentLength ?? 0,\n          lastModified: res.LastModified,\n          contentType: res.ContentType,\n        };\n      } catch {\n        return null;\n      }\n    },\n\n    async presign(key, expiresInSeconds = 3600) {\n      const command = new GetObjectCommand({ Bucket: config.bucket, Key: key });\n      return getSignedUrl(client, command, { expiresIn: expiresInSeconds });\n    },\n\n    publicUrl(key) {\n      return `${baseUrl}/${key}`;\n    },\n\n    async verify() {\n      try {\n        await client.send(new HeadBucketCommand({ Bucket: config.bucket }));\n        return null;\n      } catch (err) {\n        const message = err instanceof Error ? err.message : String(err);\n        if (message.includes('403') || message.includes('Forbidden')) return 'Access denied — check your AWS credentials and bucket permissions.';\n        if (message.includes('404') || message.includes('NotFound')) return `Bucket \"${config.bucket}\" not found in region \"${config.region}\".`;\n        if (message.includes('credentials') || message.includes('Credential')) return 'Invalid AWS credentials — check your access key and secret.';\n        return `Connection failed: ${message}`;\n      }\n    },\n  };\n};"],"mappings":";AAAA;AAAA,EACE;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,EACA;AAAA,OACK;AACP,SAAS,oBAAoB;AAC7B,SAAS,eAAe;AAyEjB,IAAM,iBAAiB,CAAC,WAAqC;AAClE,QAAM,SAAS,IAAI,SAAS;AAAA,IAC1B,QAAQ,OAAO;AAAA,IACf,GAAI,OAAO,WAAW;AAAA,MACpB,aAAa,QAAQ,EAAE,SAAS,OAAO,QAAQ,CAAC;AAAA,IAClD;AAAA,EACF,CAAC;AAED,QAAM,UAAU,WAAW,OAAO,MAAM,OAAO,OAAO,MAAM;AAE5D,SAAO;AAAA,IACL,MAAM,OAAO,KAAK,MAAM,aAAa;AACnC,YAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,QACrC,QAAQ,OAAO;AAAA,QACf,KAAK;AAAA,QACL,MAAM;AAAA,QACN,aAAa;AAAA,MACf,CAAC,CAAC;AACF,aAAO,GAAG,OAAO,IAAI,GAAG;AAAA,IAC1B;AAAA,IAEA,MAAM,SAAS,KAAK;AAClB,YAAM,MAAM,MAAM,OAAO,KAAK,IAAI,iBAAiB;AAAA,QACjD,QAAQ,OAAO;AAAA,QACf,KAAK;AAAA,MACP,CAAC,CAAC;AACF,YAAM,SAAS,IAAI;AACnB,UAAI,CAAC,OAAQ,OAAM,IAAI,MAAM,2BAA2B,GAAG,EAAE;AAC7D,aAAO,OAAO,KAAK,MAAM,OAAO,qBAAqB,CAAC;AAAA,IACxD;AAAA,IAEA,MAAM,OAAO,KAAK;AAChB,YAAM,OAAO,KAAK,IAAI,oBAAoB;AAAA,QACxC,QAAQ,OAAO;AAAA,QACf,KAAK;AAAA,MACP,CAAC,CAAC;AAAA,IACJ;AAAA,IAEA,MAAM,KAAK,QAAQ;AACjB,YAAM,MAAM,MAAM,OAAO,KAAK,IAAI,qBAAqB;AAAA,QACrD,QAAQ,OAAO;AAAA,QACf,QAAQ;AAAA,MACV,CAAC,CAAC;AACF,cAAQ,IAAI,YAAY,CAAC,GAAG,IAAI,CAAC,SAAS;AAAA,QACxC,KAAK,IAAI,OAAO;AAAA,QAChB,MAAM,IAAI,QAAQ;AAAA,QAClB,cAAc,IAAI;AAAA,MACpB,EAAE;AAAA,IACJ;AAAA,IAEA,MAAM,KAAK,KAAK;AACd,UAAI;AACF,cAAM,MAAM,MAAM,OAAO,KAAK,IAAI,kBAAkB;AAAA,UAClD,QAAQ,OAAO;AAAA,UACf,KAAK;AAAA,QACP,CAAC,CAAC;AACF,eAAO;AAAA,UACL;AAAA,UACA,MAAM,IAAI,iBAAiB;AAAA,UAC3B,cAAc,IAAI;AAAA,UAClB,aAAa,IAAI;AAAA,QACnB;AAAA,MACF,QAAQ;AACN,eAAO;AAAA,MACT;AAAA,IACF;AAAA,IAEA,MAAM,QAAQ,KAAK,mBAAmB,MAAM;AAC1C,YAAM,UAAU,IAAI,iBAAiB,EAAE,QAAQ,OAAO,QAAQ,KAAK,IAAI,CAAC;AACxE,aAAO,aAAa,QAAQ,SAAS,EAAE,WAAW,iBAAiB,CAAC;AAAA,IACtE;AAAA,IAEA,UAAU,KAAK;AACb,aAAO,GAAG,OAAO,IAAI,GAAG;AAAA,IAC1B;AAAA,IAEA,MAAM,SAAS;AACb,UAAI;AACF,cAAM,OAAO,KAAK,IAAI,kBAAkB,EAAE,QAAQ,OAAO,OAAO,CAAC,CAAC;AAClE,eAAO;AAAA,MACT,SAAS,KAAK;AACZ,cAAM,UAAU,eAAe,QAAQ,IAAI,UAAU,OAAO,GAAG;AAC/D,YAAI,QAAQ,SAAS,KAAK,KAAK,QAAQ,SAAS,WAAW,EAAG,QAAO;AACrE,YAAI,QAAQ,SAAS,KAAK,KAAK,QAAQ,SAAS,UAAU,EAAG,QAAO,WAAW,OAAO,MAAM,0BAA0B,OAAO,MAAM;AACnI,YAAI,QAAQ,SAAS,aAAa,KAAK,QAAQ,SAAS,YAAY,EAAG,QAAO;AAC9E,eAAO,sBAAsB,OAAO;AAAA,MACtC;AAAA,IACF;AAAA,EACF;AACF;","names":[]}

package/chunk-P5P73L35.js

@@ -0,0 +1,17 @@
+// ../database/src/client.ts
+var createDatabaseClient = async (config) => {
+  if (config.type === "postgresql") {
+    const { createPostgresClient } = await import("./postgresql-TRH2S2OL.js");
+    return createPostgresClient(config);
+  }
+  if (config.type === "sqlite") {
+    const { createSqliteClient } = await import("./sqlite-HPBUYY7A.js");
+    return createSqliteClient(config);
+  }
+  throw new Error(`Unsupported database type: ${config.type}`);
+};
+
+export {
+  createDatabaseClient
+};
+//# sourceMappingURL=chunk-P5P73L35.js.map

package/chunk-P5P73L35.js.map

@@ -0,0 +1 @@
+{"version":3,"sources":["../../database/src/client.ts"],"sourcesContent":["import type { DatabaseType, DatabaseSslMode } from '@repo/types';\n\n/**\n * Configuration for creating a database client.\n */\nexport interface DatabaseClientConfig {\n  /** Database engine type. */\n  type: DatabaseType;\n  /** Hostname (PostgreSQL only). */\n  host?: string;\n  /** Port number (PostgreSQL only). */\n  port?: number;\n  /** Database name (PostgreSQL) or file path (SQLite). */\n  database: string;\n  /** Username (PostgreSQL only). */\n  username?: string;\n  /** Password (PostgreSQL only). */\n  password?: string;\n  /** SSL mode (PostgreSQL only). */\n  sslMode?: DatabaseSslMode;\n}\n\n/**\n * Result of an execute (INSERT/UPDATE/DELETE) operation.\n */\nexport interface ExecuteResult {\n  /** Number of rows affected. */\n  rowsAffected: number;\n}\n\n/**\n * A typed database client that works across PostgreSQL and SQLite.\n */\nexport interface DatabaseClient {\n  /** Run a SELECT query and return typed rows. */\n  query: <T = Record<string, unknown>>(sql: string, params?: unknown[]) => Promise<T[]>;\n\n  /** Run an INSERT/UPDATE/DELETE and return rows affected. */\n  execute: (sql: string, params?: unknown[]) => Promise<ExecuteResult>;\n\n  /** Run multiple operations in a transaction. */\n  transaction: <T>(fn: (client: DatabaseClient) => Promise<T>) => Promise<T>;\n\n  /** Verify the connection works. Returns error message or null on success. */\n  verify: () => Promise<string | null>;\n\n  /** Close the connection. */\n  close: () => Promise<void>;\n}\n\n/**\n * Create a database client for the given configuration.\n * Dynamically loads the appropriate driver (PostgreSQL or SQLite).\n *\n * @param config - connection configuration\n * @returns a DatabaseClient instance\n */\nexport const createDatabaseClient = async (config: DatabaseClientConfig): Promise<DatabaseClient> => {\n  if (config.type === 'postgresql') {\n    const { createPostgresClient } = await import('./drivers/postgresql.js');\n    return createPostgresClient(config);\n  }\n\n  if (config.type === 'sqlite') {\n    const { createSqliteClient } = await import('./drivers/sqlite.js');\n    return createSqliteClient(config);\n  }\n\n  throw new Error(`Unsupported database type: ${config.type}`);\n};\n"],"mappings":";AAyDO,IAAM,uBAAuB,OAAO,WAA0D;AACnG,MAAI,OAAO,SAAS,cAAc;AAChC,UAAM,EAAE,qBAAqB,IAAI,MAAM,OAAO,0BAAyB;AACvE,WAAO,qBAAqB,MAAM;AAAA,EACpC;AAEA,MAAI,OAAO,SAAS,UAAU;AAC5B,UAAM,EAAE,mBAAmB,IAAI,MAAM,OAAO,sBAAqB;AACjE,WAAO,mBAAmB,MAAM;AAAA,EAClC;AAEA,QAAM,IAAI,MAAM,8BAA8B,OAAO,IAAI,EAAE;AAC7D;","names":[]}